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Abstract — Link and node failures are two common funda- 
mental problems that affect operational networks. Protection 
of communication networks against such failures is essential 
for maintaining network reliability and performance. Network 
protection codes (NPC) are proposed to protect operational 
networks against link and node failures. Furthermore, encoding 
and decoding operations of such codes are well developed over 
binary and finite fields. Finding network topologies, practical 
scenarios, and limits on graphs applicable for NPC are of 
interest. In this paper, we establish limits on network protection 
design. We investigate several network graphs where NPC can 
be deployed using network coding. Furthermore, we construct 
graphs with minimum number of edges suitable for network 
protection codes deployment. 

I. Introduction 

With the increase in the capacity of backbone networks, the 
failure of a single link or node can result in the loss of a 
significant amount of information, which may lead to loss of 
revenues or even catastrophic failures. Network connections 
are therefore provisioned with the property that they can 
survive such edge and node failures. Several techniques have 
been introduced in the literature to achieve such goal, where 
either extra resources are added or some of the available 
network resources are reserved as backup circuits. Recovery 
from failures is also required to be agile in order to minimize 
the network outage time. This recovery usually involves two 
steps: fault diagnosis and connections rerouting . Hence, the 
optimal network survivability problem is a multi-objective 
problem in terms of resource efficiency, operation cost, and 
agility EB, HD- 

Allowing network relay nodes to encode packets is a novel 
approach that has attracted much research work from both 
academia and industry with applications in enterprise net- 
works, wireless communication and storage systems. This ap- 
proach, which is known as network coding, offers benefits such 
as minimizing network delay, maximizing network capacity 
and enabling security and protection services, see |4:|, [9| and 
references therein. Network coding allows the sender nodes 
to combine/encode the incoming packets into one outgoing 
packet. Furthermore, the receiver nodes are allowed to decode 
those packets once they receive enough number of combi- 
nations. However, finding practical network topologies where 
network coding can be deployed is a challenging problem. 
In order to apply network coding on a network with a large 
number of nodes, one must ensure that the encoding and 
decoding operations are done correctly over binary and finite 
fields. 



There have been several applications for the edge disjoint 
paths (EDP) and node disjoint paths (NDP) problems in 
the literature including network flow, traffic routing, load 
balancing and optimal network design. In both cases (edge 
and vertex disjointness paths), deciding whether the pairs can 
be disjointedly connected is NP-complete J8]. 

A network protection scheme against a single link failure 
using network coding and reduced capacity is shown in (2). 
The scheme is extended to protect against multiple link failures 
as well as against a single node failure. A protection scheme 
protects the communication links and network traffic between 
a group of senders and receivers in a large network with several 
relay nodes. This scheme is based on what we call Network 
Protection Codes (NPCs), which are defined in Section |ll] 
The encoding and decoding operations of such codes are 
defined in the case of binary and finite fields in |T), El- In 
this paper, we establish limits on network protection codes 
and investigate several network graphs where NPC can be 
deployed. In addition, we construct graphs with minimum 
number of edges to facilitate NPC deployment. 

This paper is organized as follows. In Section UT1 we present 
the network model and essential definitions. In Section Hill we 
derive bounds on the minimum number of edges of graphs 
for NPC, and construct graphs that meet these bounds in 
Section [V] Section [IV] presents limits on certain graphs that 
are applicable for NPC deployment. 

II. Network Model and NPC Definition 

In this section we present the network model, define briefly 
network protection codes, and then state the problem. Further 
details can be found in 0. 

A. Network Model 

The network model is described as follows: 

i) Let be a network represented by an abstract graph 
G = (V, E), where V is the set of nodes and E is set 
of undirected edges. Let S and R be sets of independent 
sources and destinations, respectively. The set V = V U 
S U R contains the relay, source, and destination nodes, 
respectively. 

ii) The node can be a router, switch, or an end terminal 
depending on the network model Af and the transmission 
layer. 

iii) Let L be a set of links L = {Li, L2, ■ ■ . , Lk} carrying 
the data from the sources to the receivers. All connections 
have the same bandwidth, otherwise a connection with 
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Fig. 1. A network model with a super source S and a super receiver R. A 
set of sources and a set of receivers are shown in green color. We assume the 
source(s) and receiver(s) share k edge disjoint paths. 



high bandwidth can be divided into multiple connections, 
each of which has a unit capacity. There are exactly k 
connections. For simplicity, we assume that the number 
of sources is less than or equal to the number of links. A 
sender with a high capacity can divide its capacity into 
multiple unit capacities, each of which has its own link. 
In other words, 



Li = {(si,wu), (w u ,w 2l ), ■ • • , (v)(\)i,n)}, 



(1) 



where 1 < i < k and (wq_i^, Wji) G E, for some 
integer A > 1. 

iv) The failure on a link Li may occur due to network 
circumstances such as a link replacement and overhead. 
We assume that the receiver is able to detect a failure 
and is able to use a protection strategy to recover it. We 
will use in the rest of the paper the terms edges and links 
interchangeably 



B. NPC Definition 

Let us assume a network model TV with t > 1 path failures 
in the k working paths, i.e., paths carrying data from source(s) 
to receiver(s) J2). One can define a network protection code 
NPC which protects k edge disjoint paths as shown in the 
systematic matrix G in Eq. (01. In general, the systematic 
matrix G defines the source nodes that will send encoded 
messages and source nodes that will send only plain message 
without encoding. In order to protect k working paths, k — t 
connections must carry plain data, and t connections must 
carry encoded data. 

The generator matrix of the NPC for multiple link failures 
is given by: 



G= 



1 

1 



ident. L. 



Pn 
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where pij S F q , and q > k — t + 1, see 0. 
The matrix G can be rewritten as 



G 



Ik-t 



k-t,t 



(3) 



where Ik-t is the identity matrix and P is the sub-matrix 
that defines the redundant data Y^,i=iPij to ^ e sent to a set 
of sources for the purpose of protection from multiple link 
failures, 1 < j < t. The matrix G is defined explicitly using 
Maximum Distance Separable (MDS) optimal codes such as 
Reed-Solomon (RS) codes J5J, Q. Based on the above matrix, 
every source s$ sends its own message Xi to the receiver Ti 
via the link Li. In addition, t edge disjoint paths out of the k 
edge disjoint paths will carry encoded data. 

Definition 1: An [k,k — t] q network protection code (NPC) 
is a k-t dimensional subspace of the space F£ that is able to 
recover from t edge disjoint path failures. The code protects 
k working paths and is defined by the matrix G described in 
Eq.El 

We say that a Network Protection Code (NPC) is feasi- 
ble/valid on a graph G if the encoding and decoding operations 
can be achieved over the binary field F2 or a finite field 
with q elements F q |2j. Also, we ensure that the set of 
senders (receivers) are connected with each other. We define 
the feasibility conditions of NPC, and we will look for graphs 
that satisfy these conditions 



Definition 2 (NPC Feasibility (validity)): Let S and R be 
sets of source(s) and receiver(s) in a graph G, as shown in 
Fig. Q] We say that the network protection code (NPC) is 
feasible (valid) for k edge disjoint connections (paths) from 
Si in S to Ti in R, for i = 1, 2, .., k, if 

(i) between any two sources s, and Sj in S, there is a walk 
(path) Si — > Sj. This means that the nodes in S share a 
tree; 

(ii) between any two receivers r*j and rj in R, there is a walk 
(path) Ti — > rj. This means that the nodes in R share a 
tree; 

(iii) there are k edge disjoint paths from S to R, and the pairs 
{sj, fj) are different edge disjoint paths for all 1 < i < k. 

Therefore, we say the graph G is valid for NPC deployment. 
By Definition [2] there are k edge disjoint paths in the graph 
from a set of k senders to a set of k receivers. This also 
includes the case in which a single source sends k different 
messages through k edge disjoint paths to k receivers, and vice 
versa. The feasibility of NPC guarantees that the encoding 
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operations at the senders and decoding operations at the 
receivers can be achieved precisely. 

C. Problem Statement 

The max edge-disjoint paths (EDP) problem can be defined 
as follows. Let G — (V, E) be an undirected graph represented 
by a set of nodes (network switches, routers, hosts, etc.), and 
a set of edges (network links, hops, single connection, etc.). 
Assume all edges have the same unit distance, and they are 
alike regarding the type of connection that they represent. A 
path from a source node u to a destination node v in V is 
represented by a set of edges in E. Put differently, 

(u,v) = {(u,wi), (wi,w 2 ), . . . ,(Wj,v) 

u,v,Wi€V, (w l ,w l+ i) G E}. (4) 

Problem 1. Given fc senders and fc receivers. We can define 
a commodity problem, aka, k edge disjoint paths as follows. 
Given a network with a set of nodes V, and a set of links 
E, provision the edge disjoint paths to guarantee the encoding 
and decoding operations of NPC. 

i) Provision the k edge disjoint paths in G. Let 

L = {Li, L 2 , ■ ■ ■ , L k } 

= {{sj,rj) | V j = l,...,k, Sl ^ n eV}(5) 

be a set of commodities. 

ii) The set of sources S — {s\, . . . , s^} are connected with 
each other, and the set of receivers R = {rx, . . . , r&} are 
also connected with each other as shown in Definition [2] 

The set L is realizable in G if there exists mutually edge- 
disjoint paths from S{ to r, for all i = 1, . . . , fc. Finding the set 
L in a given arbitrary graph G is an NP-complete problem as it 
is similar to edge-disjoint Menger's Problem and unsplittable 
flow E). 

Problem 2. Given positive integers n and fc, and an NPC 
with fc working paths, find a fc-connected n-vertex graph G 
having the smallest possible number of edges. This graph by 
construction must have fc edge disjoint paths and represents a 
network which satisfies NPC. This problem will be addressed 
in Section IVl 

III. NPC and Optimal Graph Construction with 
Minimum Edges 

One might ask what the minimum number of edges on 
a graph is, in which Network Protection Codes (NPC) is 
feasible/valid as stated in Definition |2] We will answer this 
question in two cases: (i) the set of sources and receivers are 
predetermined (preselected from the network nodes), (ii) the 
sources and receivers are chosen arbitrarily. 

A. Single Source and Multiple Receivers 

We consider the case of a single source and multiple 
receivers in an arbitrary graph with n nodes. 

Lemma 3: Let G be a connected graph representing a 
network with n total nodes, among them a single source node 
and fc receiver nodes. Assume a NPC from the source node to 



the multiple receivers is applied. Then, the minimum number 
of edges required to construct the graph G is given by 

n + k - 2. (6) 

Proof: The graph G contains a single source, fc receiver 
nodes, and n — fc — 1 relay nodes (nodes that are not sources 
or receivers). To apply NPC, we must have fc edge disjoint 
paths from the source to the fc receivers. Also, all receivers 
must be connected by a tree with a minimum of fc — 1 edges. 
The remaining n — k — 1 relay nodes in G can be connected 
with at least n — k — 1 edges. Therefore, the minimum number 
of nodes required to construct the graph G is given by 

fc + (fc-l) + (n-fc-l). (7) 



B. Multiple Sources and Multiple Receivers 

Lemma 4: Let G be a connected graph with n nodes, and 
predetermined fc sources and fc receivers. Then, the minimum 
number of edges required for predetermined fc edge-disjoint 
paths for a feasible NPC solution on G is given by 

E m in = n + k-2 (8) 

Proof: We proceed the proof by constructing the graph 
G with a total number of nodes n and fc sources (receivers). 

i) There are fc sources that require a fc — 1 edges represented 
by a tree. There are fc receivers that require a fc — 1 edges 
represented by a tree. 

ii) Assume every source node Sj is connected with a receiver 
node Ti has an U nodes in between for all 1 < i < fc. 
Therefore, there are k + 1 edges in every edge-disjoint 
path, and hence the number of edges from the sources to 
receivers is given by fc + $Z i=1 h- 

iii) Assume an arbitrary node u exists in the graph G, then 
this node can be connected to a source (receiver) node or 
to another relay node. In either case, one edge is required 
to connect this node u to at least one node in G. Hence, 
the number of edges required for all other relay nodes is 
given by n - {2k + Yh=i 

iv) Therefore, the total number of edges is given by 



fc fc 
E mm - 2(fc-l)+(fc + ^ i ) + (n-(fc + ^Z i )) 

i=l i=l 

= n + k-2 (9) 



In the previous Lemma, we assume that the fc sources and 
fc receivers can be predetermined to minimize the number of 
edges on G. In Lemma |3J we assume that the sources and 
receivers can be chosen arbitrarily among the n nodes of G. 

Lemma 5: Let G = (V, E) be a connected graph with n 
nodes, and arbitrarily chosen fc sources and fc receivers. Then, 
the minimum number of edges required for any fc edge-disjoint 
paths for a feasible NPC solution on G is given by 

E min = \n(n - fc + l)/2] (10) 
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Proof: In general, assume there are fc connection paths, 
and the source and destination nodes do not share direct 
connections. In this case, every source node Sj in V must 
be connected to some relay nodes which are not receivers 
(destinations). Therefore, every source node must have a node 
degree of (n — k + 1). This agrement is also valid for any 
receiver node r; in V. If we consider all n = \V\ nodes in the 
graph G, hence the total minimum number of edges E must 
be: 

\n(n-k + 1)/2] (11) 

The ceiling value comes from the fact that both n and (n — 
k + 1) should not be odd. ■ 

IV. Edge Disjoint Paths in fc-coNNECTED and 
Regular Graphs 

In this section, we look for certain graphs where NPC 
is feasible according to Definition [2] We will consider two 
cases: single source single receiver and single source multiple 
receivers. We derive bounds on the cases of n e (G) and K V (G) 
connectivity in a fc-connected graph G, the definitions are 
states in the Appendix Section. 

A. Single Source to Single and Multiple Receivers 

Whitney J5] Theorem 5.3.6] showed that the fc-connected 
graph must have k edge disjoint paths between any two pair 
of nodes as shown in the following Theorem. 

Theorem 6 (Whitney 1932): A nontrivial graph G is fc- 
connected if and only if for each pair u, v of vertices, there 
are at least fc internally edge disjoint (u, v) paths in G. 

Theorem[6]establishes conditions for fc edge disjoint paths in 
a fc-connected graph G. In order to make NPC feasible in a fc- 
connected graph G, we require more two conditions according 
to Definition [2] all receivers are connected with each others, 
as well as all source(s) are connected with each other. 

Lemma 7: Let G be a non-trivial graph with a source node 
s and a receiver node r. Then, the NPC has a feasible solution 
with at least fc edge disjoint paths if and only if G is a fc-edge 
connected graph. 

Proof: First, we know that if G is fc-edge connected, then 
for each pair s and r of vertices, the degree of each node must 
be at least fc. If not, then removing any number of edges less 
than fc will disconnect the graph, and this contradicts the fc- 
edge connectivity assumption. Each node connected with s 
will be a starting path to r or to another node in the graph. 
Consequently, every node must have a degree of at least fc, and 
must have a path to r. Therefore, there are at least fc internally 
edge disjoint s — r paths in G. Hence, NPC is feasible by 
considering at least fc edge disjoint paths. 

Assume that NPC has a feasible(valid) solution for fc' > fc, 
then there must exist fc' > fc edge disjoint paths in G. Then, 
for each pair of vertices s and r, there are at least fc internally 
edge disjoint paths such that k s (G), K r (G) > fc, for each s and 
r non-adjacent nodes. Therefore, the graph G is fc-connected. 

■ 

Let s be a source in the network model J\f that sends fc 
different data stream to fc receivers denoted by R. We need to 




Fig. 2. An example of a regular graph of node degree three, in which NPC 
is not feasible/valid from a source node s to receiver ndoes r l , T2 and r% . 
The receivers do not share a tree after removing the node s. 



infer conditions for all R receivers to be connected with each 
other, and there are fc edge disjoint paths from s to R. In this 
case, NPC will be feasible in the abstract graph G representing 
the network J\f. 

Theorem 8: Let G be a fc-edge connected graph with a 
Hamiltonian cycle, and s, ri, ra, . . . , r% be any fc + 1 distinct 
nodes in G. Then, 

i) there is a path from s to r,, for i = 1, . . . , fc, such 
that the collection {Li, L2, ■ ■ ■ , L^} are internally edge 
disjoint paths, 

ii) the nodes in the set R are connected with each other. 
Therefore, NPC is feasible in the graph G. 

The second condition ensures that there exists a tree in the 
graph G which connects all nodes in R without repeating 
edges from the fc edge disjoint paths from s to R. 

B. Regular Graphs and NPC Feasibility 

We look to establish conditions on regular graphs where it 
is possible to apply NPC according to Definition [2] 

Theorem 9: Let G be a regular graph with minimum degree 
fc. Then G has a fc edge disjoint paths if and only if the min-cut 
separating a source from a sink is of at least fc. 
As shown in Fig. [2] the degree of each node is three and the 
min. cut separating the source node s from the receivers R 
is also three. However, we have the following negative result 
about NPC feasibility in regular graphs. 

Lemma 10: There are regular graphs with node degree k, 
in which NPC is not feasible. 

Proof: A certain example to prove this lemma would be 
a graph of 10 nodes, each of degree three, separated into two 
equally components connected with an edge, see Fig. [2] ■ 

V. Graph Construction 

We will construct graphs with a minimum number of edges 
for given certain number of vertices n and edge disjoint paths 
(connections) fc, in which NPC can be deployed. Let h^(n) 
denote the minimum number of edges that a fc-connected graph 
on n vertices must have. It is shown by F. Harary in 1962 that 
one can construct a fc-connected graph Hk, n = (V, E) on 
|V| = n vertices that has exactly \E\ = |~^] edges for fc > 2. 
The construction begins with an n-cycle graph, whose vertices 
V are consecutively numbered vo, Vx, V2, ■ ■ ■ , v n -i clockwise. 
The proof of the following Lemma is shown in [5 Proposition 
5.2.5.]. 
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Input: Two positive integers k and n, number of 
connections and vertices, such that k < n. 
Output: An optimal H^ n Harary graph for NPC. 
Begin: Scatter the n isolated nodes ; 
Let r = [k/2\. ; 

The construction of H2r.11 Harary graph.; 

foreach i=0 to n-2 do 

foreach j=i+l to n-1 do 

if j — i < r OR n + i — j < r then 
Create an edge between vertices Vi and Vj. 

end 

end 

if k is even then 

I Return graph H for NPC. 
else 

if n is even then 

foreach i=0 to S — 1 do 

Create an edge between vertex v.- L and vertices 

end 

else 

Create an edge from vertex vq to vertex n »-i ; 

2 

Create an edge from vertex vq to vertex Vn+i ; 

2 

foreach i=l to do 

Create an edge between vertex Vi and vertex 



Return graph H for NPC 

end 

Algorithm 1: Construction of an optimal graph for NPC 
with given n vertices, k connections and minimum number 
of edges. 



Lemma 11: Let G be a fc-connected graph with n nodes. 
Then, the number of edges in G is at least That is, 

h k (n)>\fl 

From Algorithm Q] one can ensure that there are k edge 
disjoint paths between any two nodes (one is sender and one 
is receiver). In addition, there are k edge disjoint paths from 
any node, which acts as a source, and k different nodes, which 
act as receivers. All nodes are connected together with a loop. 
Therefore, NPC can be deployed to such graphs. 

Due to the fact that Harary's graph is fc-connected f5] 
Theorem 5.2.6.], then using our previous result, we can deduce 
that NPC is feasible for such graphs. Harary's graphs are 
optimal for the NPC construction in the sense that they are 
fc-edge connected graphs with the fewest possible number of 
edges. 

VI. Conclusion 

In this paper, we proposed graph topologies for network 
protection using network coding. We derived bounds on the 
minimum number of edges and showed a method to construct 
optimal network graphs. 



Network protection is much easier than human protection 
against failures. S. A. A. 
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Appendix: Essential Definitions 

We assume that all graphs stated in this paper are undirected 
(bi-directional edges) unless stated otherwise. We define the 
edge-connectivity and node-connectivity of a graph G as 
follows. 

Definition 12 (Edge-cut and node-cut): Given an 
undirected connected graph G, an edge-cut in a graph 
G is a set of edges such that its removal disconnects the 
graph. A node-cut in G is a set of nodes such that its removal 
disconnects the graph. 

Definition 13 (node-edge-connectivity): The edge- 
connectivity of a connected graph G, denoted n e (G) is 
the size of a smallest edge-cut. Also, the node-connectivity of 
a connected graph G, denoted k v (G) is the minimum number 
of vertices whose removal can either disconnect the graph G 
or reduce it to a one-node graph. 

The connectivity measures k v (G) and n e (G) are used in 
a quantified model of network survivability, which is the 
capacity of a network to retain connections among its nodes 
after some edges or nodes are removed. 

Definition 14 (k-connected graph): a graph G is k-node 
connected if G is connected and k v (G) > fc. Also, a graph G 
is fc-edge connected if G is connected and every edge-cut has 
at least fc edges, K e (G) > fc. 

We define two internal connections (paths) between nodes 
u and v in a graph G to be internally edge disjoint if they 
have no edge in common. This is also different from the node 
disjoint paths. Throughout this paper, a path (u, v) from a 
starting node u to an ending node v is a walk in a graph 
G 0, i.e., it does not contain the same node or edge twice. 



